ended3월 25일· 1 sources

How I Audit 200+ Dependencies in 5 Minutes (Free Tools Only)

200개 이상의 의존성을 5분 만에 감사하는 방법 (무료 도구만 사용)

Why it matters

After the LiteLLM PyPI compromise, the author built a 5-minute dependency audit workflow using free tools (NVD, OSV.dev, EPSS) to check all transitive dependencies against vulnerability databases. The workflow lists all packages, queries CVE databases, scores exploit probability via EPSS, and generates a prioritized risk report—catching issues that pip audit alone misses.

1
Sources
+0
24h
Growth
172d
Active
dependency auditNVDOSV.devEPSSCVEpip audit

Sources

Related Issues